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Qh' Abstract 






Quantum cryptographic systems have been commercially available, with a striking advantage 
over classical systems that their security and ability to detect the presence of eavesdropping 
r^ ' are provable based on the principles of quantum mechanics. On the other hand, quantum 

^H' protocol designers may commit much more faults than classical protocol designers since human 

intuition is much better adapted to the classical world than the quantum world. To offer formal 
techniques for modeling and verification of quantum protocols, several quantum extensions 
^>^ I of process algebra have been proposed. One of the most serious issues in quantum process 

I ■ algebra is to discover a quantum generalization of the notion of bisimulation, which lies in a 

(-y-j ' central position in process algebra, preserved by parallel composition in the presence of quantum 

w-v , entanglement, which has no counterpart in classical computation. Quite a few versions of 

rvq ■ bisimulation have been defined for quantum processes in the literature, but in the best case 

^V ' they are only proved to be preserved by parallel composition of purely quantum processes 

L»^ , where no classical communications are involved. 

J.— ^ ' Many quantum cryptographic protocols, however, employ the LOCC (Local Operations and 

Classical Communications) scheme, where classical communications must be explicitly speci- 
fied. So, a notion of bisimulation preserved by parallel composition in the circumstance of both 
classical and quantum communications is crucial for process algebra approach to verification of 
J^> , quantum cryptographic protocols. In this paper we introduce a novel notion of bisimulation for 

t . • quantum processes and prove that it is congruent with respect to various process algebra corn- 

ed ' binators including parallel composition even when both classical and quantum communications 

are present. We also establish some basic algebraic laws for this bisimulation. In particular, we 
prove uniqueness of the solutions to recursive equations of quantum processes, which provides 
a powerful proof technique for verifying complex quantum protocols. 

1 Introduction 

Quantum computing offers the potential of considerable speedup over classical computing for some 
important problems such as prime factoring [17] and unsorted database search [7]. However, func- 
tional quantum computers which can harness this potential in dealing with practical applications are 
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extremely difficult to implement. On the other hand, quantum cryptography, of which the security 
and ability to detect the presence of eavesdropping are provable based on the principles of quantum 
mechanics, has been developed so rapidly that quantum cryptographic systems are already com- 
mercially available by a number of companies such as Id Quantique, Cerberis, MagiQ Technologies, 
SmartQuantum, and NEC. 

As is well known, it is very difficult to guarantee correctness of classical communication protocols 
at the design stage, and some simple protocols were finally found to have fundamental flaws. Since 
human intuition is much worse adapted to the quantum world than the classical world, quantum 
protocol designers may commit much more faults than classical protocol designers, especially when 
more and more complicated quantum protocols can be implemented by future physical technology. 
With the purpose of cloning the success classical process algebras achieve in analyzing and verifying 
classical communication protocols and even distributed computing, various quantum process alge- 
bras have been proposed independently by several research groups. Jorrand and Lalire [10] defined 
a language QPAlg (Quantum Process Algebra) by extending a classical CCS-like process algebra. A 
branching bisimulation which identifies quantum processes associated with graphs having the same 
branching structure was also presented [12]. The bisimulation is, however, not congruent: it is not 
preserved by parallel composition. Gay and Nagarajan [6] defined a language CQP (Communicating 
Quantum Processes), which combines the communication primitives of pi-calculus [13] with primi- 
tives for unitary transformations and measurements. One distinctive feature of CQP is a type system 
which guarantees the physical realizability of quantum processes. However, no notion of equivalence 
between processes was presented. 

Authors of the current paper proposed a model named qCCS [5] for quantum communicating 
systems by adding quantum input/output and quantum operation/measurement primitives to clas- 
sical value-passing CCS [8, 9]. The semantics of quantum input and output was carefully designed 
to describe the communication of quantum systems which have been entangled with other systems. 
A bisimulation was defined for finite processes, and a simplified version of congruence property was 
proved, in which parallel composition is only permitted when the participating processes are free of 
quantum input, or free of quantum operations and measurement. In [19] the same authors studied a 
purely quantum version of qCCS where no classical data is explicitly involved, aiming at providing 
us a suitable framework to observe the interaction of computation and communication in quantum 
systems. A bisimulation was defined for this purely quantum qCCS and shown to be fully preserved 
by parallel composition. It is worth noting that, however, the bisimulation proposed in [19] cannot 
be directly extended to general qCCS where classical data as well as probabilistic behaviors are 
included. 

In this paper, we combine the two models proposed in [5] and [19] together to involve both classical 
data and quantum data. This general model, which we still call qCCS for coherence, accommodates 
all classical process constructors (especially recursive definitions) as well as quantum primitives. 
As a consequence, both sequential and distributed quantum computing, quantum communication 
protocols, and quantum cryptographic systems can be formally modeled and rigorously analyzed in 
the framework of qCCS. We also design a bisimulation for processes in qCCS and an equivalence 
relation based on it, which turns out to be a congruence. This bisimulation has several distinctive 
features compared with those proposed in the literature: Firstly, it takes local quantum operations 
into account in a weak manner, but at the same time fits well with recursive definitions. Lalire's 
bisimulation cannot distinguish different operations on a quantum system which will never be output: 
quantum states are only compared when they are input or output. Bisimulation defined in [5] works 
well only for finite processes since quantum states are required to be compared after all the actions 
have been performed. Note that no state comparison is needed in [19] since all local quantum 
operations are regarded as visible actions, and the resulted bisimulation is a very strong one - it 
distinguishes two different sequences of local operations even when they have the same effect as 
a whole. Secondly, entanglement between the input/output system and the remaining systems is 
fully considered in our definition. Bisimulation presented in [12] totally ignores this correlation by 



only considering the reduced state of the input/output system. In [5] this consideration is imphcitly 
made by the state comparison after the processes terminating. Again, it does not work for infinite 
processes. Finally, but most importantly, the bisimulation presented here is preserved by parallel 
composition, and the equivalence derived by the bisimulation is a congruence, making them suitable 
for equational reasoning in verifying quantum communication and cryptographic systems. Lalire's 
bisimulation is not preserved by parallel composition. The bisimulation in [5] is not preserved by 
restriction, and whether it is preserved by parallel composition still remains open, although the 
positive answer is affirmed in two special cases. The bisimulation proposed in [19] is indeed a 
congruence. However, since no classical data is involved in that model, many important quantum 
communication protocols such as superdense coding and teleportation cannot be described. This 
restricts the scope of its application. 

The paper is organized as follows: in Section 2, we review some basic notions from linear algebra 
and quantum mechanics. The syntax and operational semantics of qCCS are presented in Section 
3. To illustrate the expressiveness of qCCS, we describe with it the well-known quantum superdense 
coding and teleportation protocols. We also show how to encode quantum unitary gates and mea- 
surement gates, which are two basic elements of quantum circuits, by qCCS. Section 4 defines the 
notion of bisimulations for configurations as well as quantum processes. Equivalence relation based 
on bisimularity is also defined and proved to be fully preserved by all process constructors of qCCS. 
The validity of examples in Section 3 is proved by using the notion of bisimilarity defined in this 
section. Various properties such as monoid laws, static laws, the expansion law, as well as uniqueness 
of solutions of process equations are also examined. We outline the main results in Section 5 and 
point out some problems for further study. 

2 Preliminaries 

For convenience of the reader, we briefly recall some basic notions from linear algebra and quantum 
theory which are needed in this paper. For more details, we refer to [15]. 

2.1 Basic linear algebra 

A Hilbert space "H is a complete vector space equipped with an inner product 

(•[•) -.nxn^c 

such that 

(1) (i/'IV') ^ for any \tp) £ H, with equality if and only if \tp) — 0; 

(2) (0|^) = (V;|0)*; 

(3) (<^IE.A.|V^.)=E.A.(<^|^.), 

where C is the set of complex numbers, and for each A G C, A* stands for the complex conjugate of 
A. For any vector \tp) G H, its length |||V')|| is defined to be y'' {ip\ip), and it is said to be normalized 
if HIV') 1 1 — 1- Two vectors [ip) and \(f)) are orthogonal if {ip\4') — 0. An orthonormal basis of a Hilbert 
space "H is a basis {[«)} where each |z) is normalized and any pair of them are orthogonal. 

Let C{H) be the set of linear operators on H. For any A E C{T-L), A is Hermitian ii A^ —A where 
A^ is the adjoint operator of ^ such that (i/'|A'f |0) = ((/)|A|V')* for any 1-0), \(j)) G H. The fundamental 
spectrum theorem states that the set of all normalized eigenvectors of a Hermitian operator in £('H) 
contains an orthonormal basis for H. That is, there exists a so-called spectral decomposition for 
each Hermitian A such that 

A = ;^A,|^)(^|= ^ KE, 

i i^spec(A) 



where the set {|J)} constitute an orthonormal basis of H, spec{A) denotes the set of eigenvalues of 
A, and Ei is the projector to the corresponding eigenspace of A^. A hnear operator A € C{T-l) is 
unitary if A^ A = AA'^ = I-^ where /^ is the identity operator on H. In this paper, we will use some 
well-known unitary operators listed as follows: the quantum control-not operator performed on two 
qubits with the matrix representation 
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under the computational basis, and the 1-qubit Hadamard operator H and Pauli operators cr° , cr^ , cr^ , cr 
defined respectively as 

The trace oi A e C{H) is defined as tr(A) — '^i{i\A\i) for some given orthonormal basis {|i)} of "H. 
It is worth noting that trace function is actually independent of the orthonormal basis selected. It is 
also easy to check that trace function is linear and tr(yl_B) = tr(i?^) for any operators A,Be C{T-L). 

Let "Hi and "^2 be two Hilbcrt spaces. Their tensor product T-Li® 7^2 is defined as a vector space 
consisting of linear combinations of the vectors IV'iV'2) = |V'i)|V'2) = IV'i) ® \'^2) with \'ipi) € "Hi and 
IV'2) G "^2. Here the tensor product of two vectors is defined by a new vector such that 



3 




X^A.IV'i) ® ^H\(t^3) =^>^i^^]\^i) ® \(t^3 



Then "Hi ® "^2 is also a Hilbert space where the inner product is defined as the following: for any 

\il)i),\(j)i) (^Ui and IV2), 102) €7^2, 



(■01 (X)V'2|01 «'02) = (0l|0l)«i(V'2|0: 



'2/«2 



where {■\-)'Hi is the inner product of "Hj. For any Ai e C{Hi) and A2 G £("^2), Ax ® A2 is defined 
as a linear operator in £ ("Hi (g) 7^2) such that for each |'0i) G 'Hi and |i/'2) € 7^2, 

(Ai 0^2) 1^-102) =Ai|V'l)®A2|0'2)- 

The partial trace oi A & C{Hi (E) 7^2) with respected to 7^i is defined as ti-H-^{A) — '^i{i\A\i) where 
{\i)} is an orthonormal basis of 7^i. Similarly, we can define the partial trace of A with respected 
to 7^2 • Partial trace functions are also independent of the orthonormal basis selected. 

A linear operator £ on £(7^) is completely positive if it maps positive operators in £(7Z) to 
positive operators in C{'H), and for any auxiliary Hilbert space H' , the trivially extended operator 
I-H' (X) S also maps positive operators in £(7^' ® V.) to positive operators in £(7^' (g) H). Here I-w 
is the identity operator on £(7^'). The elegant and powerful Kraus representation theorem [11] of 
completely positive operators states that a linear operator £ is completely positive if and only if 
there are some set of operators {Ei\ with appropriate dimension such that 

£{A)^Y.^^'^^l 

i 

for any A G C{T-L). The operators Ei are called Kraus operators of £. A linear operator is said 
to be a super- operator if it is completely positive and trace-nonincreasing. Here an operator £ 



is trace-nonincreasing if tr(5(A)) < tr{A) for any positive A € C{'H), and it is said to be trace- 
preserving if the equality always holds. Then a super-operator (resp. a trace-preserving super- 
operator) is a completely positive operator with its Kraus operators Ei satisfying ^^ ElEi < I 
(resp. J:^ElE,=I). 

2.2 Basic quantum mechanics 

According to von Neumann's formalism of quantum mechanics [18], an isolated physical system is 
associated with a Hilbert space which is called the state space of the system. A pure state of a 
quantum system is a normalized vector in its state space, and a mixed state is represented by a 
density operator on the state space. Here a density operator p on Hilbert space "H is a positive linear 
operator such that tr(p) = 1. Another equivalent representation of density operator is probabilistic 
ensemble of pure states. In particular, given an ensemble {{pi, {ipi})} where pi > 0, X^jP* ~ 1' ^^"^ 
\ipi) are pure states, then p = X^i-PidV'i)] is a density operator. Here [\ipi)] denotes the abbreviation 
of |V'i)('0i|- Conversely, each density operator can be generated by an ensemble of pure states in this 
way. 

It is mathematically convenient to allow the trace of a density operator to be less than 1, which 
makes it possible to represent both the actual state (by the normalized density operator) and the 
probability with which the state is reached (by its trace) in a single expression [16]. Then the set of 
(partial) density operators on "H can be defined as 

VCH) = { /5 G £■{?{) : p is positive and tr(p) < 1}. 

The state space of a composite system (for example, a quantum system consisting of many qubits) 
is the tensor product of the state spaces of its components. For a mixed state p on Hi 7^2, partial 
traces of p have explicit physical meanings: the density operators tr^^p and tr-fi^p are exactly the 
reduced quantum states of p on the second and the first component system, respectively. Note that 
in general, the state of a composite system cannot be decomposed into tensor product of the reduced 
states on its component systems. A well-known example is the 2-qubit state 

|vl/) = i=(|00) + |ll)) 

which appears repeatedly in our examples of this paper. This kind of state is called entangled state. 
To see the strangeness of entanglement, suppose a measurement M — Ao[|0)] + Ai[|l)] is applied on 
the first qubit of |^) (see the following for the definition of quantum measurements). Then after 
the measurement, the second qubit will definitely collapse into state |0) or |1) depending on whether 
the outcome Xq or Ai is observed. In other words, the measurement on the first qubit changes the 
state of the second qubit in some way. This is an outstanding feature of quantum mechanics which 
has no counterpart in classical world, and is the key to many quantum information processing tasks 
such as teleportation [3] and superdense coding [4]. 

The evolution of a closed quantum system is described by a unitary operator on its state space: 
if the states of the system at times fi and ^2 are pi and p2, respectively, then p2 — UpiW for some 
unitary operator U which depends only on ti and ^2- In contrast, the general dynamics which can 
occur in a physical system is described by a super-operator on its state space. Note that the unitary 
transformation U{p) = UpW is a trace-preserving super-operator. 

A quantum measurement is described by a collection {Mm} of measurement operators, where the 
indices m refer to the measurement outcomes. It is required that the measurement operators satisfy 
the completeness equation ^^ M^Mm = I-h- If the system is in state p, then the probability that 
measurement result m occurs is given by 

p{m) = tr(A/4M™p), 



and the state of the post-measurement system is MmpMl^/p{m). 

A particular case of measurement is projective measurement which is usuahy represented by a 
Hermitian operator. Let M be a Hermitian operator and 

M = ^ mEm 

m^spec{M) 

its spectral decomposition. Obviously, the projectors {Em '■ rn € spec{M)} form a quantum mea- 
surement. If the state of a quantum system is p, then the probability that result m occurs when 
measuring M on the system is p{m) = tr(_Emp), and the post-measurement state of the system is 
EmpEm/p{fn). Note that for each outcome m, the map 

is again a super-operator by Kraus Theorem; it is not trace-preserving in general. 

3 Basic definitions of qCCS 

In this section, we give the basic definitions of qCCS, which is a combination of those proposed 
in [5] and [19], involving classical data as well as quantum data, all classical process constructors 
(especially the recursive definition) as well as quantum primitives. The reader is referred to [5] and 
[19] for further examples and explanations of the language. 

3.1 Syntax 

For simplicity, only two types of data are considered in qCCS: real numbers Real for classical data 
and qubits Qbt for quantum data. Let cVar, ranged over by x, y, . . . , be the set of classical variables 
and qVar, ranged over by q,r, . . . , the set of quantum variables. It is assumed that cVar and 
qVar are both countably infinite. Let Exp, ranged over by e, be the set of expressions with the 
value domain Real. Let cChan be the set of classical channel names, ranged over by c, d, . . . , and 
qChan the set of quantum channel names, ranged over by c, d, . . . . Let Chan = cChan U qChan. 
A relabeling function / is a one to one function from Chan to Chan such that f(cChan) C cChan 
and f{qChan) C qChan. 

We often abbreviate the indexed set {qi,...,qn} to g when qi,...,qn are distinct quantum 
variables and the dimension n is understood. Sometimes we also use q to denote the string gi . . . g„. 
We assume a set of process constant schemes, ranged over by A,B,.... Assigned to each process 
constant scheme A there is a non- negative integer ar{A) . If q is a tuple of distinct quantum variables 
with \q\ — ar{A), then A{q) is called a process constant. 

Based on these notations, we now propose the syntax of qCCS as follows. 

Definition 3.1 (Quantum process) The set of quantum processes qProc and the free quantum 
variable function qv : qProc — > 2''^"'" are defined inductively by the following formation rules: 

(1) nil € qProc, and qv{nil) = 0; 

(2) ACq) e qProc, and qv{A{q)) = q; 

(3) T.P e qProc, and qv{T.P) ~ qv{P); 

(4) clx.P G qProc, and qv{clx.P) = qv{P); 

(5) cle.P G qProc, and qv{c\e.P) = qv{P); 



(6) clq.P G qProc, and qv{clq.P) = qv{P) — {q]\ 

(7) li q^ qv(P) then dq.P G qProc, and qv(dq.P) = qv(P) U {q}; 

(8) £[g].P e gProc, and gw(£[q].P) = qv{P) U g; 

(9) M[g; x\.P e grProc, and qw(M[q; x\.P) == (7w(P) U g; 

(10) P + Qe qProc, and gi;(P + Q) = qv(P) U gw(Q); 

(11) If qv{P) n gw(Q) == then P\\Q e qProc, and qv{P\\Q) = ^^(P) U qv{Q); 

(12) P[/] e gProc, and qv{P[f]) = qv{P); 

(13) P\L e qProc, and qv{P\L) = qv(P); 

(14) if 6 then P G qProc, and gf (if 5 then P) = qv{P), 

where P,Q <E qProc, c G cChan, x G cVar, c G qChan, q G qVar, q C qVar, e G i<^xp, t is the 
silent action, A(g) is a process constant, / is a relabeling function, L C Chan, 6 is a boolean- valued 
expression, £ and M are respectively a trace-preserving super-operator and a Hermitian operator 
applying on the Hilbert space associated with the systems q. Furthermore, for each process constant 
A{q), there is a defining equation 

A{q) '^^ P 
where P G qProc with qv{P) C q. When q^= 0, we simply denote A{q) as A. 

The notion of free classical variables in quantum processes can be defined in the usual way with 
a unique modification that quantum measurement M[q;a;] has binding power on x. A quantum 
process P is closed if it contains no free classical variables, i.e., fv{P) = 0. 

3.2 Operational semantics 

To present the operational semantics of qCCS, some further notations are necessary. For each 
quantum variable q G qVar, we assume a 2-dimcnsional Hilbert space T-lq to be the state space of 
the g-system. For any S C qVar, we denote 

Hs = (g)H,. 

qes 

In particular, H ~ Ti-qVar is the state space of the whole environment consisting of all the quantum 
variables. Note that "H is a countably infinite-dimensional Hilbert space. 

Suppose P is a closed quantum process. A pair of the form (P, p) is called a configuration, where 
p G I'('H) is a density operator on "H. The set of configurations is denoted by Con. We sometimes 
let C, 2?, . . . range over Con to ease notations. 

Let D(Con) be the set of finite-support probability distributions over Con; that is, 

D{Con) == {^ : Con -^ [0, 1] | [i{C) > for finitely 

many C, and N, m(C) = !}• 
m(c)>o 

For any fi G D{Con), we denote by supp{p) the support set of ^, i.e., the set of configurations C 
such that /x(C) > 0. When /i is a simple distribution such that supp{^) = {C} for some C, we abuse 
the notation slightly to denote p hy C. Sometimes we find it convenient to denote a distribution p 



by an explicit form /i = ffljg/pj • Ci (or /i = Spi • Ci when the index set / is understood) where Ci 
are distinct configurations, supp^ji) — {Ci : i e /}, and ^J,{Ci) = pi for each i G /. 

Given ^i, . . . , /i„ G D{Con) and pi, . . . ,Pn G [0, 1], X^iK ~ 1' '^^ define the combined distribu- 
tion, denoted by "^i^iPifJ-i, to be a new distribution /i such that supp{p,) = [J^ supp{fii) , and for 
any T> e supp{^i), ^i{T>) = Y.iPil^ii'^)- 

It is worth pointing out the difference between the two notations ffl^g/pi • C^ and '^i^iPiCi'- 
the former is the exphcit form of a distribution, so it is required that pi > Q for each i ^ I, and 
Ci 7^ Cj for i ^ j] while the latter is a combined distribution of the simple distributions Ci with the 
probability weights pi, so pi may be zero for some i (z I, and Ci are not necessarily distinct. 

Let fi — Wi^ipiU {Pi, Pi). We denote by qv{pL) the free variables of /i; that is, qv{fi) = Uie/ 1^{Pi)- 
We write tr(/i) = X]ie/Pit^(/°i)i ^^i^ ^(a*) — Hie/K • {Pii^{pi)) when 5 is a super-operator. 

Let 

Aci = {r} U {c?u,c!w I c€ cC/ian,u G Real}U 
{c!r,c\r \ c G qChan,r G gV^ar}. 

For each a G Act, we define the bound quantum variable bv{a) of a as bv{c7r) ~ {r} and 6w(a) = 
if a is not a quantum input. The channel name used in action a is denoted by cn{a); that is, 
cn(clv) — cn{c\v) = {c}, cn(c?r) = cn[c\r) = {c}, and cn(T) = 0. 

The semantics of qCCS is given by the probabilistic labeled transition system [Con, Act, — >), 
where — > C Con x Act x D{Con) is the smallest relation satisfying the rules defined in Figs. 1 and 
2 (For brevity, we write {P,p) — > p instead of {{P, p),a, p) G — >. The symmetric forms for Rules 
Inp-Int, Oth-Int, and Sum are omitted). 

The transition relation — > can be lifted to D{Con) x Act x D{Con) by writing p — ;■ v if for 
any C G supp{p), C ^ vc for some vq, and v = Ecesupp(/x) l^{C)vc- 

For any S C qVar we denote by S the complement set of S in qVar. The following lemmas can 
be easily observed from the inference rules defined above. 

Lemma 3.2 // {P, p) — > p, then qv{p) C qv{P) U {few (a)}. 

Proof. By induction on the inference rules. D 

Lemma 3.3 // {P, p) — > p, then 

(1) tv{p) - tr(/i); 

(2) there exist a set of super- operators {£i : i Cz 1} acting on Hqyip) such that for any a G 'D{'H), 

{P,a)^m,eIq1•{P^.£^{^)|q1) 
where qf — tr(£i(cr))/tr(CT); 

(3) for any super- operator £ acting on H ^/p\ , 

{P,£{p))^£{p). 
Proof. By induction on the inference rules. D 



Tau 



(t.P,p)^(P,p) 



C-Inp : , V E Real 

{c7x.P,p)^{P{v/x},p) 

C-Outp 



{cle.P,p)^{P,p)' 



C-Com 



{P,,p)^{Pi,p), {P2,p)^{P^,p) 
{P,\\P2,p)^{Pi\\P^,p) 



Q-Inp : , r^qv{c7q.P) 

{c7q.P,p)^{P{r/q},p) 

Q-Outp 



Q-Com : 
Oper : 
Meas : 



{dq.P,p)^{P,p) 

{P,,p)^{P[,p), {P,,p)^{P^,p) 
{P,\\P2,p)^{Pi\\P^,p) 



{£[7].P,p)^{P,£r{p)) 



{M[r;x].P,p) -^ E^eIMP{>^^/^}^KpEyp^) 

where M has the spectrum decomposition 
M = E^eI ^^E" and p, - tr(^ip)/tr(p) 

Figure 1: Inference rules for qCCS (Part 1) 

3.3 Examples 

To illustrate the expressiveness of qCCS, we give some examples. 

Example 3.4 Supcrdense coding [4] is a quantum protocol using which two bits of classical informa- 
tion can be faithfully transmitted by sending only one qubit, provided that a maximally entangled 
state is shared a priori between the sender and the receiver. The protocol goes as follows. Let 
|vl/) = (|00) + |ll))/\/2 be the entangled state shared between the sender Alice and the receiver Bob. 
Alice applies a Pauli operator on her qubit of |^) according to which information among the four 
possibilities she wishes to transmit, and sends her qubit to Bob. With the two qubits in hand, Bob 
performs a perfect discrimination among the possible states (they are actually the four Bell states 
{cr* (g) /|^) : i = 0, 1, 2, 3} where u* are defined in Section 2) and retrieves the information Alice has 
sent. 

We now show how to describe the protocol of superdense coding with qCCS. Let M be a 2-qubit 
measurement such that M = X]i=o^l^)(^l' '^here i is the binary expansion of i. Let CN be the 
controUed-not operator and H Hadamard operator. Then the quantum processes participated in 



Inp-Int 



Oth-Int 



Sum 



{P,\\P2,p)^{Pi\\P2,p) 

{P^\\P2,p)^m,^m•{Pl\\P2,p^) 
{P,p)^p 



{P + Q,p)^p 

j^gj. {P,p)^mp^>{Pi,Pi) 

{P[.f],p}^^Sp,.{P,[f],p,} 

(P, p) -^ mp^ • {P^,p^), CTl(a) ^ L 
{P\L,p)^mp,.{P^L,p,) 

{P,p)^p, M=true 
(if b then P, p) — > p 

{P{?/q\,p)^p, Ajq)"^ P 
{A{7).P)^P 

Figure 2: Inference rules for qCCS (Part 2) 

superdense coding protocol can be defined as follows: 

Alices = c?x. 2_, (if X = i then (T*[gi].e!(7i.nil) , 

0<i<3 

Bobs = elqi.CN[qi,q2].H[qi].M[qi,q2;x\.d\x.ni\, 
Sdc ^ {Alices\\Bobs)\{e}. 



Res 



Cho 



Def 
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For any p G 'D{T-L-r -y) and v € {0, 1, 2, 3}, we have the transitions 



d\v 



Sdc,[\-^)]q,,q,(i(>p) 

^ (if u = i then cr'[(7i].e!<7i.ml) \\Bohs ) \{e}, 

0<i<3 J 

[\'^)]quq2®p) 

(e!qi.ml||Bo6,)\{e},a;([|vl/)])®p) 
(nilllCiVfei, rj2].ff bi].M[(7i, 92; x].d!x.nil)\{e}, 

<([|*)])®P) 
(nil|l/7[(7i].M[(7i, 92; x].ci!a;.nil)\{e}, 

{rii\\\M[qi,q2]x\.d\x.ni\)\{e},[\lS)]q^^q^ ® p) 
(ml||db.nil)\{e},[|^],,,g, ®p) 



(1) 



Here Eq.(l) is calculated as follows: 

{ if,^(CiV,^,,^([Mi>])) = [|00)], if^; = 

Example 3.5 Quantum teleportation [3] is one of the most important protocols in quantum in- 
formation theory which can make use of a maximally entangled state shared between the sender 
and the receiver to teleport an unknown quantum state by sending only classical information. It 
serves as a key ingredient in many other communication protocols. The protocol goes as follows. Let 
l^)gi,«2 be the entanglement state shared between the sender Alice and the receiver Bob, with Alice 
holding qi and Bob holding 92- Let q be the quantum system whose state Alice want to transmit to 
Bob. Alice first applies a quantum control- not operations on q and 91, with q the control qubit and 
gi the target, followed by a Hadamard operator H on q. She then measures q and qi according to 
the computational basis, and sends the measurement outcome to Bob. Upon receiving the classical 
bits from Alice, Bob applies a corresponding Pauli operator on his qubit (72 to recover the original 
state of q. 

Let M, CiV, -ff, and cr% i = 0, . . . , 3 be as defined in Example 3.4. Then the quantum processes 
participated in teleportation protocol can be defined as follows: 



Alicct 
Boh 



= clq.CN[q,qi\.H[q].M[q,qi]x\.e\x.ni\, 



e'.x. 



2_\ (if a; = i then cr*[92]-d!92-nil). 



Tel = 



0<i<3 

{Alicet\\Boht)\{e}, 
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For any p G V{nj^^^^), we have 



{{CN[r,qi].H[r].M[r,qi;x].c\x.nil\\Bobt)\{e}, 

[|*>]91,92®P) 

{{H[r].M[r,qi;x].c\x.nn\\Bobt)\{e}, 

CNr,g,m)]g„q, <S) p)) 
{{M[r,qi;x].dx.nil\\Bobt)\{e}, 

E i[ll>].,,.®<(p)) (2) 

0<i<3 

1/4 . ((c!0.nil||Bo6t)\{e}, [|00)].,gi ® p) 
ffll/4. ((c!l.ml||Bo60\{e},[|01)],,,, ®ai^(p)) 

ffll/4. {{c\2.ni\\\Boht)\{e},[\l{))]r^q,(i(>al^{p)) 

ffll/4. ((c!3.ml||Bo60\{e},[|ll>].,gi ®<(p)), 



and for < j < 3, 



{{c\J.nl\\\Boh)\{e},[\J)U,^®'^UP)) 

((nilll E (if.?=*then(T*fe].d!g2.nil))\{e}, 

0<i<3 

[lI)]r,9i'»<(/0)) 

((ml||d!g2.nil)\{e},[|j)],,,, ®p) 
((ml||nil)\{e},[|I)],^,, ®p). 

Here Eq.(2) is calculated as follows. Notice that any p E 'C>{T-L-, t) can be decomposed as p = 

Y.o<i<zlAH^)]r®P^ where iVo) = |0),|^i) = |1),|V2) = 1+) = (|0) + |1))/A and l^-g) - h) - 
(|0) - |l))/y2. Then it is easy to derive that 



dlqo 



Hr{CNr,,Am],,,,,®p)) 

To 
4 



|000) + |011) + |100) + |111)],,,,,,, ®pi 



+^[|001) + 1010) - |101) - |110)].,,„5, ® P2 
+^[|00+> + |01+> + |10-> - 111-)].,,,.,, ® P3 
+f [|00-> - |01-> + |10+> + |ll+>].,,,,,, ® P4 



= \[mUr(^p+\[\oi)u,(^^iip) 



-i[|10)],,,, ®<(p) + i 



-[|10)],,,, ®<(p) + -[|ll)],,,,®a3^(p). 



Example 3.6 (Encode quantum circuits with qCCS) Quantum circuits consist of two different types 
of gates: unitary gates and quantum measurements. We now show how to encode them using qCCS. 
To ease the notations, we allow quantum channels to input and output multiple qubits. We write 
the quantum channel c as c" if n qubits can be communicated through c simultaneously. In other 
words, the quantum capacity of c" is n qubits. 
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Unitary gate. Suppose t/ is a unitary operator acting on n qubits. Then the unitary gate which 
implements U can be defined as a process constant U{U), qv{U{U)) = 0, with the defining 
equation 



U{U) =■'' c"?g.C/[g].d"!g^.W(C/). 



We denote ar{U{U)) = n. 



• Measurement gate. Suppose M is a quantum measurement acting on n qubits. Then the 
measurement gate which implements M can be defined as 

M{M) '^^' e'lq.M[q;x\.e\x.A'^\q.M{M). 



We denote ar(M{M)) = n. 
For any p E T>{H), we have 



{U{U),p) =-4 {U[^.d-\7.U{U),p) 
-^ {d^\r.U{U),UrpUl) 

'^ {U{U),UrpUl) 



and 



{M{M),p) '-4' (M[f;x].e!x.d"F.X(M),p) 

^ m,em • {elXa''lr.M{M),E'~pEyp,) 

where M = J^iei ^i^^ ^^"^ Pi = tr(_Ejr/5)/tr(/9). Now for each i e /, 

{e\\^.A'^W.M{M),E^pE'^/p^) 

'^ {M{M),E^pE^^/p,). 

Suppose Qi and Q2 are two (unitary or measurement) gates with ar{Qi) = ar(Q2) = n. The 
sequential composition of Qi and Q2 can be defined as 

^10^2 '= (i.||gi[e7c",f7d"]||g2r/c",g7d"]||i?.)\ 
{c,e",f",g"} 

where Ls = c^lq.e^lq.clx.Ls and Rs = g^lq.d^lq.clO.Rs- 

If ar{Qi) = m and ar{Q2) = n, then the parallel composition of Qi and Q2 is defined as 

^1^52 ''= (ip||gi[er/c",fr/d"]||g2[e7c",f2"/d"] 

where Lp =^ c™+"?g.e5"!/(5).e5!r(g).c?x.Lp, 

Rp "i^ fr?fi.f2"?r2.d"+"!(fir2).c!0.i?p, 

1(g) denotes the prefix of q with length m while r(5) the postfix of q with length n, and r\r2 is the 
concatenation of fi and f^ . 
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4 (Weak) Bisimulation between quantum processes 

To present the notion of bisimulation which abstracts the internal actions caused by local quantum 
operations and (classical or quantum) communications, we first extend the transition relation defined 
in Section 3. 

Definition 4.1 We define the relation ==> C Con x D{Con) as the smallest relation satisfying the 
following conditions: 

(1) c=^c- 

(2) if C — ;■ fflig/pi • Ci and Ci =^ fii for each i d I, then C =^ "^piiii. 

Similar to — 5-, we can also lift =^ to D{Con) x D{Con) by writing /i =^ v if for each C G supp{fj,), 
C =^ vc for some vq such that v = J2cesupp{ti) m(C)j^c- 

For any /i, (^ G D{Con) and s — ai . . . an G Act* , we say that /i can evolve into i^ by a weak s- 
transition, denoted by /i => v, if there exist y^i, . . . , Hn+i, vi, . . . ,Vn G D{Con), such that /i => /ii, 
lin+i = '^j and for each i = 1, . . . , n, /i^ — ^ Vi and t'i =^ /ii+i. 

Lemma 4.2 Lef /i = ffl^g/Pi • Ci and s G Act* . Then /i ^=> v if and only for each i G /, Ci =^ Vi 
for some vi such that 'Ylii^iPi^i — ^■ 

Proof. Direct to check. D 

Note that /i =^ — ;■ v and /i =^ v are different since in the former the last action of every 

execution branch from fi to i> must be a while in the latter the action a appeared in each branch is 

not necessarily the last one. 

With these notations, we can extend Lemma 3.3 to the weak transition case. 

Lemma 4.3 // {P, p) =^ ji, then 

(1) tr(p) = tr(M); 

(2) there exist a set of super- operators {£i : i Cz 1} acting on 'Hqv{p)ubv{s) where bv{ai . . . a„) — 
bv{ai) U • • • U bv{an), such that for any a G 'D{'H); 

{P,a) ^m.eiq^ • {P,,£,{a)/q^) 

where q^ = tT{£i{a))/tT{a); 

(3) for any super- operator £ acting on % — ^ps , , s , we have {P,£{p)) =^ £{f^)- 

Proof. We first note from Lemma 3.3(1) that if v — ;■ fi, then tr(i^) — tr(/i). So to prove (1), we 
need only to show tr(i^) = tr(/i) provided that v =^ ji. 

Suppose (P, (o) => /i. li fi — {P,p), then tr((o) = tr(/x) holds trivially. Otherwise by definition 
4.1, we have (P, p) — > ffl^g/pi • Ci, Ci =^ pi for each i G /, and p = ^i^jPtlJ'i- Then 

tr(Ai) = ^Pitr{pt) 
iei 

= 2^Piir{Ci) By induction 

= tr(/9) By Lemma 3.3(1). 

Now if z^ = EBjgj<7j • {Pj,pj) and v =^ p, then for each j G J, {Pj,pj) ^=> pj for some pj, and 
A^ = Ejej Qitij- So tr(i^) = J^jeJ qMPj) = Ejej qMPj) = tr(^). 

The proofs of Lemma 4.3(2) and (3) are more complicated, but the idea is similar. So we omit 
the detail here. D 
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4.1 Bisimulation 

To present the notion of bisimulation, we need a definition from [2] . 

Definition 4.4 Let TZ C Con x Con be a relation on Con, and /i, J^ G D{Con). A weight function 
for (fi, v) w.r.t. TZ is a function S : supp{fi) x supp{v) — > [0, f] which satisfies 

(1) For allC,Ve Con, 

J2 <5(C,P) = m(C), J2 5{C,V) = v{V)- 

'DGsupp{iy) C€supp(fi) 

(2) If5{C,V) > 0, then {C,V) e 7^. 

We write jiTZv if there exists a weight function for (fi, i>) w.r.t. TZ. 
Lemma 4.5 [2] Suppose ^,1^,10 E D{Con), TZ,TZ' C Con x Con. 

(1) jiTZv if and only if vTZ^^ ^; 

(2) iiTZv and vTZ'uj, then iiTZ o TZ'lu; 

(3) IfTZC TZ' , then fiTZv implies pJZ'v. 

Lemma 4.6 Let fi,i' (z D{Con). Then iiTZi> if and only if fi = "^i^jPiCi and v — "^i^j PiT^i such 
that CiTZT>i for each i (z I. In particular, if CTZ^ then CTZT> for each T> G supp{p,). 

Note that when we write fi — "^i^j PiCi, then Ci denotes a simple distribution. As a consequence, 
the CiS are not necessarily distinct. 

Proof. Let ^TZv, and (5 is a weight function for {^, v) w.r.t. TZ. Then we have 

^ = ^ ii.{C)C 

C€isupp(p) 

= J2 Yl '5(C,X')C By Definition 4.4(f) 

CGsuppifj,) T>Gsupp{i') 

= ^(5(C,X>)C By Definition 4.4(2). 

CTZV 

Similarly, 1/ = X^cKi? S{C,T>)T>. That proves the necessity part. 

Conversely, suppose /i ~ "l^ieiPi^i ^n-'i '^ ~ "l^iei Pi'^i where CiTZT>i for each i G I. We construct 
a function S : supp(fi) x supp{v) — > [0, f ] such that 



5{C, V) - Y.^\p^ -.C.^C and V, = V\}. 



iei 
Here {| . . . |} denotes a multiset. Then for any C G supplp), 

J2 <5(C,2?)^^{b.:C.=C|} = MC), 

'D£supp{i') i€l 

and similarly, for any V G supp{v), J2cesupp(ij.) H^^'^) = '^i'^)- Furthermore, if S{C,T>) > 0, then 
Ci = C and T>i =T) for some i G /. Thus CTZT) lay the assumption that CiTZT>i. D 
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Definition 4.7 A relation TZ C Con x Con is called a bisimulation if for any {P,p), {Q,(j) € Con, 
(P,p)TZ{Q,a) implies that qv{P) = qv{Q), trqy(^p){p) = trq^,(Q)((7), and 

(1) whenever {P, p) — — > p, then (Q,cr) ^=>^^- i^ for some v such that for any super- operator £ 
acting on 'H ^„(^)_{^} ; £{p)'R£{v); 

(2) whenever {P, p) — ;■ /i where a is not a quantum input, then there exists v such that {Q, a) =^ 
V and pTZv; 

CO CO 

(3) whenever {Q,(t) — ^- i', then {P, p) ^=>^— > p for some p such that for any super- operator £ 
acting on "H^^j^^jp^, £{p)n£{v); 

(4) whenever {Q, a) — ;■ v where a is not a quantum input, then there exists p such that {P, p) =^ 
p and pTZv. 

Definition 4.8 (1) Two quantum configurations {P, p) and {Q, a) are bisimilar, denoted by {P, p) k. 
{Q,a), if there exists a bisimulation TZ such that {P, p)TZ{Q , a) ; 

(2) Two quantum processes P and Q are bisimilar, denoted by P ~ Q, if for any quantum state 
p e T>{'H) and any indexed set v of classical values, {P{v/x}, p) « {Q{v/x}, p). Here x is the 
set of free classical variables contained in P and Q. 

Some design decisions made in Definition 4.7 deserve justification and explanation: 

• Recall that in the definition of bisiniulations proposed in [5] , a clause 

If {P, p) -/-^ and (Q, a) -/—f, then p = G (3) 

is presented to guarantee that the quantum operations applied by P and Q, which give rise only 
to invisible actions, are the same. That definition, however, does not fit well with recursive 
definitions since recursively defined processes will generally never reach a terminating process. 

In Definition 4.7, we solve this problem by requiring instead that 

tV(P)(/5) =tV(Q)('^)- (4) 

Obviously, when (P, p) -/-^ and (Q,cr) -/-^, and P and Q do not hold any quantum variables, 
Eqs. (3) and (4) are equivalent. However, Eq.(4) can deal with processes which have infinite 
behaviors. For example, let 

A'^li zlq.Seta{q\.z\q.A 

and 

1 

B = c?g.Mo,i[g;x]. /^(if x = Xj then ai\q\.c\q.B) 

4=0 

where SetQ is the super-operator which sets the target qubit to |0) , and Mo.i is the measurement 
according to the computational basis; that is, Mq^i = Ao|0)(0| + Ai|l)(l|. Intuitively, B can 
be regarded as an implementation of A specifying how to set the input qubit to |0). We now 
show Ak, B indeed holds under our definition of bisimulation. Let 

Cono,p = {(A,p),(B,p)} 

Con^^q^p = {{Aiq,p),{A2q,Po),{Blq,p),{B2qj,Pj),{B3q,Po) -j ==0,1} 
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where Aiq = SetQ[q].clq.A, A2q = dq.A, 

1 
Big = Mo,i[g;x].y^(if X = A^ then (Ti[q].c\q.B), 

i=0 
1 

B2qj = y^(if Aj = At then (7i[q].c\q.B), 

i=0 

B^q — clq.B, and pj = [\j)]q ® tr^p. Let 7^ C Con x Con such that (P, (t)TZ{Q, rj) if and only 
if there exist q E qVar and p € 'D{T-L) such that (P, cr) and (Q, 77) are simultaneously included 
in CoHQp or Coniqp. Then it is not difficult to prove that 7^ is a bisimulation. Thus A Ri B. 

• Furthermore, by replacing Eq.(3) with Eq.(4), the derived bisimilarity will be preserved by 
restriction. Take the example in [5]. Let Ui, U2, Vi, V2 be unitary operators such that 
U2U1 ^ V2V1 but Ui^Vi. Let 

P = Ui[q]A0.U2[q].-ai\,Q = T/i[(7].c!0.y2M.niL 

Then P and Q are bisimilar but P\{c} and Q\{c\ arc not if Eq.(3) is required in the definition. 
However, in our definition presented here, P\{c] and Q\{c\ are also bisimilar since in Eq.(4) 
we only need to consider the reduced states on the systems qv{P) = qv{Q). The "unfinished" 
quantum operations, which are blocked by the restriction, are not taken into account when 
comparing the accompanying quantum states. 

• Another question one may ask is that why we require qv{P) = qv{Q) in the definition, which 
excludes the pair 

P = /[gj.nil and Q — nil 

to be bisimilar. The reason is, although P and Q have the same effect (they both do nothing 
at all) on the environment, they are indeed different under parallel composition. For example, 
if (7 G qv{R), then the process Q\\R is valid while P||-R is not. 

• In Clause (1), we require £{p)TZ£{v) for any super-operator £ acting on % ^, ■,_, -, . The 
reason for this rather strange requirement is as follows. To check whether two configurations 
are bisimilar, we have to feed them with all possible inputs. In classical process algebra, this 
is realized by requiring that the input value is arbitrarily chosen. In quantum process algebra, 
however, since the state of all environmental systems is fixed for a given configuration, only 
requiring the arbitrariness of the input system is not sufficient. Note that the state-preparation 
operation and the swap operation are both special super-operators. Our definition actually 
includes the possibility of inputing an arbitrary system which lies in an arbitrary state. 

Furthermore, this requirement is also essential in proving the congruence property of the 
derived bisimilarity (See Theorem 4.18). 

Example 4.9 (Superdense coding revisited) This example is devoted to proving rigorously that the 
protocol presented in Example 3.4 indeed sends two bits of classical information from Alice to Bob 
by transmitting a qubit, with the help of a maximally entangled state. Let 

Sdcgpec ~ c7x.Setx[qi, q2]-d\x.ni[ 

be the specification of superdense coding protocol, where 

3 

Setx:[qi, q2]-d\x.nil = y^(if a; = i then Seti[qi, q2].d\x.nil), 



i=0 
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and Seti^ z = 0, . . . , 3, is the 2-qubit super-operator which sets the target qubits to |i); that is, for 
any p G V{n), 

SeU^q^q,{p) ^ [\i)]q.q' (S) tlq^q, {p) . 

We have Set^lqi, (72] in the specification simply for technical reasons: to make qv(Sdcspec) — qv{Sdc) 
and to set qi, (72 to the required final states. For any p G 2?('Ht r), and v G {0, f , 2, 3}, 

{SdCspec,[\'^)]quq2 «* P) 

^ {Sety[qi,q2].dlv.nU,[\-^)]q^^q^ (g) p) 
-^ {dlv.nU,[\V)]q^^q^(^p) 

{ni\,[\v)]q,^q^(g)p). 



d\v 



We can easily prove 
by checking that 



{Sdc, [\^)]q,^q., (E>p)~ (SdCspec, [|*)]gi,92 <» P) 



TZ = {{(Sdc,p,s,),(Sdcspec,p'i'))} 

U{{{P,ri),{SeU[qi,q2].d\v.nil,p^)) : u = 0,...,3, 

{Sdc,p^) ^ {P,rj), and qv{P) ^ 0} 
U{(((nil||d!w.ml)\{e}, p^), {dlv.nil, pj?)) : w = 0, . . . , 3} 
U{(((nil||ml)\{e}, p^), (nil, p^)) : v = 0, . . . , 3} 

is a bisimulation, where p^ = [|V')]gi.92 ® P- 

Note that Sdc « Sdcgpec does not hold in general since superdense coding protocol needs the 
assistance of a maximally entangled state to realize the intended task. 

Example 4.10 (Teleportation revisited) This example is devoted to proving rigorously that the 
protocol presented in Example 3.5 indeed teleports any unknown quantum state from Alice to Bob, 
again with the help of a maximally entangled state. To employ our notion of bisimulation, we need 
to modify the original definition of Alice's protocol in Example 3.5 as follows: 

Alice[ — clq.CN[q,qi].H[q].M[q,qi;x].Set^i,[q,qi].elx.nil 

and Tel' — {Alicef\\Bobt)\c where Set-q, is similar to Set^ in the previous example. Let 

Tehpec - clq.SWAPi^3[q,qi, q2].d\q2.nil 

be the specification of teleportation protocol, where SWAPi^ is a 3-qubit unitary operator which 
exchanges the states of the first and the third qubits, keeping the second qubit untouched. Again, 
we involve qubit qi here just for technique reason: to make qv(Telspec) — qv(Tel'). Then for any 
P ^ ^("^ {91.92} ) ^^'^ ^ ^ ^1' '^2, 

{Telspec,[\'^)]quq2<»p) 

^ {SWAP,,3[r,qi,q2].d\q2.nil,m]q„q,(g>p) 
-^ (d!92.nil, [|*)]g,,^®p) 

(nil,[|*)]qi,r<»p). 



d'.qo 



We can now prove 



{Tel', m]q,,q, ® p) « {Telspec, mU-.q^ ® P) 
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by checking that 

n = {{{TeI,pl^^'^^),{Tehpec,ptn)} 

U{{{P,v),{SWAP,^s[r,qi,q2]-dl\q2.ni\,al'^'>n: 

qv{P) ^ {r,qi,q2}, and r 7^ gi , 172 } 

U{((P,77),(d!g2.ml,<0: 

{Tel',<jl'^'^') ^ 11 with (P,77) e supp{p), 

^ ^ ^("^ {91,^2} )' g^(-P) == {92}, and r 7^ gi,<72} 

U{(((nil||nil)\{c}, <■'-), (niUl-'-)) : a e 2?(H^^^)} 

is a bisimulation, where a'^'^ — [|V')]q,(?' 'X' o. 

Again, Tel' « Telgpec docs not hold in general since Teleportation protocol is valid only when a 
maximally entangled state is provided and consumed. 

The following example shows the bimilarity between quantum processes. 

Example 4.11 (Encode quantum circuits by qCCS, revisited) Using the notion presented in Ex- 
ample 3.6, we can prove the following properties considering the sequential composition and parallel 
composition of quantum gates: 

(1) U{U)oU{V)KiU{VU)\ 

(2) U{U) o g{M) « g{WMU)oU{U); 

(3) U{U) ® U{V) « U{V ® V). 

The proof is straightforward, and we only take (1) as an example. Let 

n = {{{U(U)oU{V),p),{U{VU),p)):peV{H)} 

U {((P,a),(g,r;» : {U(U) oU{V), p) "=^ {P,<j) and 

{U{VU), p) ^ (g, i) where f C qVar and p G V{H)} 
U {((P,a>,(g,r;)) : {U{U) oU{V), p) '"'i^i"'^ (P, a) and 

{U{VU),p) ="'^"''' (g^r/) where fC qVar and p e V{H)}. 

It is easy to check that 7^ is a bisimulation. So we have {U{U) oU(V),p) w {U{VU), p) for all 
p e V{H) and then Zi(t/) o U{V) « Z^(FC/). 

To conclude this section, we prove some properties of bisimilarity which are useful in the rest of 
this paper. 

Lemma 4.12 Let TZ be a bisimulation, and pTZv. 

(1) If p =^^-^ p' , then V =^^-^ v' for some v' such that for any super- operator £ acting on 

(2) If p =^ p' where a is not a quantum input, then there exists v' such that v =^ v' and p'TZv' . 
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Proof. Easy from Lemma 4.6, noting that /i => v if and only for any C G supp{pL), C =^ vc with 

Theorem 4.13 ^ is a bisimulation on Con, and it is an equivalence relation. 

Proof. Let each TZi, {i — 1,2,...) be a bisimulation on Con. From Lemmas 4.5 and 4.12, we can 
prove that the following relations are all bisimulations: 

(1) Idcon (2) 7^-l 

(3)7^lo7^2 (4)U^*- 

Then the result follows. D 

Theorem 4.14 For any configurations {P, p) and {Q,a), {P, p) « (Q,cr) */ and only if qv{P) = 
qv{Q), tr^„(p)(p) = tr,„(Q)(CT), and 

CO CO 

(1) whenever {P, p) — — > p., then {Q,a) ^=>^^- v for some v such that for any super- operator E 
acting on ^ q^(^)_{q} , ^{p) ~ ^{v); 

(2) whenever {P, p) — ;■ p where a is not a quantum input, then there exists v such that (Q, cr) => 
i> and p PS v; 

and the symmetric conditions of (1) and (2). 

Proof. Similar to the corresponding result. Theorem 36, of [5]. D 

Lemma 4.15 If {P, p) ss {Q,a), then for any super- operator £ acting onJi — 7pr, we have tT{£{p)) = 
tr(£((T)). In particular, tT{p) = tr((7). 

Proof Let S = qv{P). From (P,p) « {Q,cr), we have trs(p) = trs(cr). Note that £{tTs{p)) = 
trsi^ip)) since £ acts only on H-g, and tr{£{p)) = tT-g{ti s {^ {p))) ■ The result follows. D 

As in classical process algebra, the notion of bisimulation up to « can be defined: 

Definition 4.16 A relation TZ C ConxCon is called a bisimulation up to ss if for any {P, p), {Q, a) G 
Con, {P,p)TZ{Q,a) implies that qv{P) — qv{Q), trq„(p)(/9) ~ trq„(Q)((T), and 

(1) whenever {P, p) — — > p, then {Q,cr) =^^-^ v for some v such that for any super- operator £ 
acting on 'H ^t,(^)_{^} ; £{pyflo ^£{u); 

(2) whenever {P, p) — 5- p where a is not a quantum input, then there exists v such that {Q, a) =^ 
V and pTZo kv; 

and the symmetric conditions of (1) and (2). 

Lemma 4.17 IfTZisa bisimulation up to ~, then TZ Css. 

Proof Suppose 7?. is a bisimulation up to «. We first prove that that TZo « is a bisimulation. Let 

{P, p)TZo Ri {Q,a-); that is, there exists {R,ri) such that {P, p)TZ{R,ri) and {R,ri) sa {Q,a). Then 
qv{P) = qv{K) = qv{Q), and tr,^(p)(p) = tr,^(p)(77) = tr,^(Q)(cr). 

CO CO 

Let (P, p) -^ p. Then {R, rj) ^=>^^- oj such that for any super-operator £ acting on "H 



qv{p,)-{q}^ 



£{p)TZo Ri£(Lu). We further derive from Lemma 4.12 that {Q,cr) ^=>^^- ly, and for any super- 
operator J^ acting on H ^/^\_r •, , J^{ijj)^J^{v). Note that qv{p) — qv{uj). We have £'{p)TZo k,£'[v) 
for any super-operator £' acting on % — , ■._, -, , by Lemma 4.5. 
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Let {P, p) — > /i for some a not a quantum input. Then {R,ri) => ly such that fiTZo rh/. 

Furthermore, from {R,ri) « (Q,cr) we have {Q,(j) =^ uj such that vk,uj, by Lemma 4.12. So we 
have \iR.o koo from Lemma 4.5. 

The symmetric form when (Q, a) — > can be similarly proved. So TZo « is a bisimulation; that 
is, TZo wC«. Then the result holds by noting that the identity relation is a trivial bisimulation. D 

4.2 Bisimilarity congruence 

We now turn to prove the congruence properties of bisimulation. First, we show that the bisimulation 
for configurations is preserved by all static constructors. 

Theorem 4.18 If {P, p) ~ {Q,a) then 

(1) (P||i?,p)«(Q||i?,a); 

(2) (P[./],p)«(Q[./],a); 

(3) {P\L,p)^{Q\L,a); 

(4) (if b then P, p) w (if b then Q, a). 

Proof. Let us prove (1); other cases are simpler. Let 
TZ = {{{P\\R,£{p)), {Q\\R,£{(t))) : {P,p) ~ (Q,cr) and £ is a super-operator acting on H ^,pA - 

It suffices to show that 7?. is a bisimulation. Suppose (C,2?) G TZ where C = {P\\R,£{p)) and 
V — {Q\\R,£{a)) for some {P, p) ~ {Q,a-), and £ is a super-operator acting on H ^,py Then 
qv(P) = qv{Q) and tr^^j-p) (p) ~ trq^(Q-) (cr) by Theorem 4.14. Thus qv(P\\R) = qv(Q\\R) and 

tV(p||7?)(f (p)) == trg^(Q||p)(£(cr)). 

Let {P\\R,£{p)) — ;■ p for some a and p. There are three cases to consider. 

I: The transition is caused by P solely. We need to further consider two subcases: 

i: a — clq is a quantum input. Then there exists a transition {P, p) -—^ {P' y p) Q-nd 
p ~ {P'\\R,£{p)). By the assumption that {P, p) ~ {Q,a), we have 

(Q, a) =^ SieiPi • {Q'i, o-j) — > WieiPi • (Qi, cTi) 
such that for any super-operator T acting on H y(pi)_r i ; 

(P',J-(p))«(g„J-(a,)) (5) 

holds for any i G /. Then {Q,£{a)) => ffl^g/pi* ((5^,£(CTi)) by Lemma 4.3(3), from which 
we further derive 

(Q,£(a)> ^^ ffl.e/p, . {Q^,£{<Ti)) 

and 

(g||i?,£((T)) ^^ V = m,em • (g.||i?,£(aO). 

For any super-operator T' acting on % — (pi\\m-s \ i we obtain from Lemma 3.2 that the 
composite map J^' o £ is a super-operator acting on % — ipi\_f i - Now using Eq.(5) we 
have 

(P',J-'(£(p)))«(g„J-'(£(aO)), 
and thus {P'\\R,F'{£{p)))n{Q^\\R,F'{£{(Ti))). That is, F'{p)nF'{v) as required. 
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ii: a is not a quantum input. Then there exists a transition (P, p) — > /ii = ffl^g/pi • {Pi, pi) 
and /i — Si^ipi • {Pi\\R,£{pi)) by Lemma 3.3(3). From the assumption that {P, p) ~ 
{Q, cr), we have 

{Q,a) ^vi = ffljejqj • {Qj,(Tj) 
and pi ~ vi by Theorem 4.14. Noting that £ is a super-operator on % — t^y, we have 
{Q,£{a)) =^ Sj^jQj • {Qj,£{<Tj)) by Lemma 4.3(3). So it holds that 

{Q\\R,£{a)) ^y = m,e.jq, . {Q,\\R,£{a,)). 

Now for each i e J and j G J, {Pi,Pi) ~ {Qj,aj) implies {Pi\\R,£{pi))TZ{Qj\\R,£{aj)} 
since from Lemma 3.2, £ is also a super-operator acting on "H — 7pT. Thus wc have pTZv 
by Lemma 4.6, by noting that pi ~ J^i. 

IL The transition is caused by R solely. We also need to further consider two subcases: 

i: a — c7q is a quantum input where q ^ qv(P). Then we have {R,£{p)) — ^- {R',£{p)) 

for some i?', and p = {P\\R',£{p)). Thus {R,£{<t)) ^ {R',£{a)). By inference rule 
Inp-Int, we have 

{Q\\R,£{<j))^{Q\\R',£{a)) 

since q ^ qv(Q). Now for any super-operator T acting on "H — (p\\ri)^s x ; the composite 
map J^ o £ is a super-operator acting on H ^,p. from the fact that qv{P\\R') — {q} D 
qv(P) - {q} = qv(P). Thus 

{P\\R',T{£{p))}n{Q\\R',J^{£{a))) 

from the definition of TZ. 

ii: a is not a quantum input. Then by Lemma 3.3(2), there exists a transition (i?, £{p)) — ;■ 
Wpi • {Ri,£i{£{p))/pi) where £i is a super-operator on 'Hqv(R), 

p, = tr(£,(£(p)))/tr(f (p)), 

and p — Wpi • {P\\Ri,£i{£{p))/pi). Then we derive 

{R,£{a)) -^ mq,*{R,,£,{£{a))/q,) 

where qi — tr{£i{£{(j)))/ti{£{a)), again by Lemma 3.3(2). Thus 

{Q\\R, £{a)) -^v^mq,* {Q\\R,, £,{£{a))/q,). 

Notice that for any i, we have pi — qi by Lemma 4.15, and 

((P||i?„£,(£(p))), {Q\\R^,£^{£{<7)))) e n 

since the composite map £* o £ is a super-operator acting on "H — j-pT {qv(R) D qv{P) — 
by the validity of P\\R)- Then it follows that pTZv from Lemma 4.6. 

IIL The transition is caused by a communication between P and R. Without loss of generality, 
we assume that 

{P,p)^{P',p), {R,p)^{R!,p), 
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and /i = {P'\\R\£{p)). Other cases arc simpler. Then q ^ qv{P) by the validity of P||i?, and 
{R, rf) -^ {R' , rj) for any -q G 'D{H). From the assumption that {P, p) « (Q, ct), we have 

((5,cr) =^ ^ieiPi • {Q[,o-i) ^ ^ieiPi • (Qi^cTi) 

such that for any i G / and any super-operator J-" acting on "H — (pn^t p it holds that 
{P' ,F{p)) K, {Qi,J-'{(Ti)). In particular, we have 

(P',£(p))«(Q„£(<T,)) (6) 

since qv{P) 3 (7w(P') — {g}. Noting that £ is a super-operator on H ^.„. , we have (Q, f (cr)) =^ 
fflj6/ft • {Q'iJ^i'^i)) by Lemma 4.3(3), from which we derive further 

{Q, £{<!)) =^^ ffl.e/K • {Q^,£{^^)). 

and 

(Q||i?,£:(a)) ^^ V = ffl,e,p, . (Q,||i?',£(a,)). 

Furthermore, for any i (^ I, we have 

{{P'\\R\£{p)},{Q,\\R',£{a,)})en 
by Eq.(6). That is, pTZv as required. 

The symmetric form when {Q\\R,£(a)) — ;■ ly can be similarly proved. So 7?. is a bisimulation 
on Con. The result follows by noting that the identity transformation is also a super-operator on 

From Theorem 4.18, the superdense coding protocol and teleportation protocol presented in 
Section 3 is still valid in any quantum process context which consists only of parallel composition, 
relabeling, restriction, and conditional. 

The configuration bisimulation is not preserved, however, by dynamic constructors such as prefix 
and summation. A counterexample is as follows. Let P = Mo,i[g; xj.nil where Mq.i = Ao[|0)] + Ai[|l)] 
is the 1-qubit measurement according to the computational basis, Q = /[gj.nil, and p — [\0)]q (E) cr 
where a G X'('Hg). Then {P, p) « {Q,p), but {H[q].P, p) ^i {H[q].Q,p) where H is the Hadamard 
operator. 

Nevertheless, similar to standard classical CCS, the bisimulation for quantum processes is pre- 
served by all the combinators of qCCS except for summation. 

Theorem 4.19 If P ^ Q then 

(1) a.P ss a.Q, a £ {r, c7x, c!e, c?g, dq, £[q\,M[q; x]}; 

(2) P\\RkQ\\R; 

(3) P[f] « Q[/]; 

(4) P\L « Q\L; 

(5) if h then P w if 6 then Q. 

Proof. The proof for (1) is similar to Theorem 38 of [5], and (2)-(5) are direct from Theorem 4.18. 

D 
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4.3 Congruent equivalence of quantum processes 

As in classical process algebra, the bisiniilarity « is not preserved by summation combinator " + " . 
To deal with this problem, we introduce the notion of equality between quantum processes based on 



Definition 4.20 Two configurations {P, p) and ((5,cr) are said to be equal, denoted by {P, p) — 
{Q,<t), ifqv{P) = qv{Q), tTqv(p){p) = tr,^,(Q)(cr), and 

CO C Q 

(1) whenever {P, p) -—^ p, then {Q,cr) ^=>^^- i' for some v such that for any super- operator £ 
acting on 'H ^t,(^)_{g} ; '^(m) « ^{1^); 

(2) whenever {P, p) — ;■ p where a is not a quantum input, then there exists v such that {Q, a) =^ 
V and p « v; 

and the symmetric conditions of (1) and (2). 

The only difference between the definitions of « and ~ is that in the latter the =^ transition 
in Clause (2) is replaced by =^] that is, the matching action for a r-move has to be at least one 
T-move. 

Furthermore, we lift the definition of equality to quantum processes as follows. For P, Q G qProc, 
P '^ Q \i and only if for any quantum state p G 'D{'H) and any indexed set v of classical values, 
{P{v/x),p) ~ {Q{v/x},p) where x = fv{P) U fv{Q). 

It is worth noting that all the bisimulation relations proved in the examples of previous subsec- 
tions are also valid when « is replaced by ~. 

Now we prove that the equality relation is preserved by various process constructors of qCCS. 

Tiieorem 4.21 If P ^ Q then 
(1) a.P (^ a.Q, a (^ {T,c7x,cle,c7q,clq,£[q\,M[q;x]}; 
(2) P + Rc^Q + R; 

(3) P\\R~Q\\R; 

(4) P[f] ^ Qif]; 

(5) P\L ~ Q\L; 

(6) if b tlien P ~ if & then Q. 

Proof. Similar to the result for bisimulation. D 

The monoid laws and the static laws in classical CCS can also be generalized to qCCS. 

Theorem 4.22 For any P,Q,R e qProc, K,L C Chan, any relabeling functions f,f', and any 
action prefix a, we have 

(1) P + nil ~ P; 

(2) P + P:^ P; 

(3) P + Q~Q + P; 

U) P+{Q + R)~{P + Q) + R; 
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(5) P|lnil~P; 

(6) P||Q~g||P; 

(7) P||(Q||P)~(P||Q)||P; 
nil, if cn{a) G L 



(9) {a.P)[f]c^f{a).P[f]; 
(10) {P + Q)\L~P\L + Q\L; 

(11) {p+Q)[n^p[n + Q[n; 

(12) P\L ~ P if cn{P) C\ L — %, where cn(P) is the set of free channel names used in P; 

(13) {P\K)\L c^ P\{KU L); 

(U) (P||0)\P~P\L||Q\P, z/cn(P)ncn(g)ni = 0; 

(15) P[/]\i^P\/-i(L)[/]; 

(16) P[Id] — P where Id is the identity relabeling function; 

(17) P[f] — P[/'] if the restrictions of f and f on cn{P) coincide; 

(18) P[/][/']^P[/'o/]; 

(19) {P\\Q)[f] ~ P[f]\\Q[f] if the restriction of f on cn{P) U cn(Q) is one-to-one. 

Proof Routine. D 

In the following theorem, we simply write P — > P' if for any p G 2?('H), {P, p) — > (P', p). 

Theorem 4.23 (Expansion Law) Let 

P={Pl[fl]\\---\\Pn[fn])\L. 

Then 

P ^ J2 {/.(")-(A[/i]ll • • • ll^'LMII • • • \\Pnlfn])\L ■.P^^Pl and f^{cn{a)) ^ l] 

+ J2 {.A(c?2;)-(A[/i]|| • • • \\Pm\\ ■ ■ ■ \\Pn[fn])\L : p. ^ Pl{v/x} for any v, and f,{c) ^ l} 

+ J2 {m-iPilfi]\\ ■ ■ ■ \\Pm\\ ■ ■ ■ \\Pn[fn])\L : (P„p) ^ (P,',%(p)> for any p] 

+ Y. { M[q;xUP,[fi]\\ ■ ■ ■ \\Pm\\ ■ ■ ■ \\Pn[fn])\L : M = J] A,i^, and 

{Pi,p) -^ ^jeJPj • {Pl{^]lx},Kj^qpKj,q/pj) for any p| 

P, ^ Pi P, A P;, I < J, fdcn{a)) = fjicnip)), and 

among a and /3 there is exactly one input and one output}. 
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Proof. Routine. D 

We now turn to examine the properties of the congruent equivalence ~ under recursive definitions. 
To this end, we assume a set of process variable schemes, ranged over by X, Y, ... . Assigned to each 
process variable scheme X there is a non-negative integer ar{X). If q is an indexed set of distinct 
quantum variables with \q\ = ar{A), then X{q) is called a process variable. 

Process expressions may be defined by adding the following clause into Definition 3.1 (and re- 
placing the word "process" by the phrase "process expression" and "qProc" by "qExp" ) : 

(15) X{q) e qExp, and qv{X{q)) = q 
where X(q) is a process variable. We use metavariables E, F, . . . to range over process expressions. 
Suppose that _E is a process expression, and {Xi{qi) : i e /} is a family of process variables. If 
{Pi : i G /} is a family of processes such that qv{Pi) C g^ for all i, then we write 

E{PJXM) : * e n 
for the process obtained by replacing simultaneously Xi((ii) in E with Pi for all i G /. 

Definition 4.24 Let E and F be process expressions containing at most process variables {Xi{qi) : 
2 G /}. Then E and F are equal, denoted by E cri F , if for all family {Pi : i E 1} of quantum 
processes with qv{Pi) Q qi, we have 

E{PJXM) : * e /} ~ F{P,/XM) --iel}. 

For simplicity, sometimes we denote E{Pi/Xi{qi) : i G /} as E{P/X} or even E{P) when it does 
not cause any confusion. The next theorem shows that ~ is also preserved by recursive definitions. 

Theorem 4.25 (1) If A{q) ''= P, then A{q) ~ P; 

(2) Let {Ei : z G /} and {Fi : i <E I{ he two families of process expressions containing at most 
process variables {Xi{qi) : i G /}, and Ei ~ Fi for each i & I. If {Ai{qi) : i G /} and 
{Bi{qi) : i G /} he two families of process constants such that 

A^m "^ EdA,{q,)/X,{q,):jeI} 
B^{q^) "^ F,{B,{q,)/X,{q,):jeI}, 
then Ai{qi) ~ Bi{qi) for all « G /. 

Proof. (1) is obvious. For (2), we only prove the special case where |/| = 1 and for any i G /, (ft = 0. 

de f de f 

That is, we prove ^ ~ B assuming that qv{A) = qv{B) = 0, A = E{A) and B = F{B) where E 
and F are process expressions containing process variable X with qv{X) = 0, and E c^i F . 
Let 

TZ = {{{G(A), p), {G{B),p)) : p G T>{H),G contains at most process variable X}. 

Obviously, for any {G{A),p)n{G{B),p), we have (7w(G(A)) = qv{G{B)) and tr,„(G(A))(p) = ^t: qv{G{B)){p) ■ 
Similar to Propositions 4.12 and 7.8 of [14], we can prove the following properties by induction on 
the depth of the inference by which the action {G{A), p) — ;■ p is inferred: 

(i) whenever {G{A), p) -^ p, then {G{B), p) ^=>^^- v such that for any super-operator £ acting 

(ii) whenever {G{A),p) — > p where a is not a quantum input, there exists v such that 
{G{B), p) =^ V and pTZo fnv. 
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Only one case deserves elaboration: when G ~ Gi\\G2 and {G{A)^p) — > {P',p) is caused by 

{Gi{A),p)^{Pi,p) and {G2{A),p) ^ {P^,p) 
where P' = P{\\P2- By induction, we have 

(Gi(S),p) =^^ s,em . {QlJ'-ip)) 

where J^^ is a super-operator acting on qv{Gi) (here Lemma 4.3(2) is used for the => transition), 
and for any super-operator £ on "H — ,„,.._, , and any i G /, it holds 

{P[,£{p))n{Q[,£{p)) « (Q1,£(J-Kp)). (7) 

Thus P{ = Hi{A) and Q'j^ = Hi{B) for some _ffi containing only process variable X. 
Also by induction, we have 

(G2(B),p)^ffl,e,7<Z,.(giJ-,(p)) 
where Fj is a super-operator acting on qv{G2), and for any j G J, 

(p^,p)7^(g'2,p)«(QiJ■,(p)). (8) 

Thus P2 = H2{A) and Q'2 = H2{B) for some _ff2 containing only process variable X. 

Now by inference rule Q-Com, and noting that T[ and Tj commute for any i Cz I and j (z J 
since qv{Gi) n qv{G2) = 0, we derive that 

(G(B),p) ^ B^ei a.eJPrq, • (gil|gi-^,(-^I(p))). 

Now we calculate that for any i (E I and j G J, 

{Pi\\P^,p) = {{H,\\H2){A),p) 

n {{Hi\\H2){B),p) By definition 

= {Q'i\\Q'2.p) 

w {Q'^\\Q{,Fj{p)) By Eq. (8) and Theorem 4.18 

w {Q\\\Qi,Fj{F[{p))) By Eq.(7), Lemma 3.2, and Theorem 4.18. 

Similarly, we can prove the symmetric form of (i) and (ii) for {G{B),p) — ;-. Then 7?. is a 
bisimulation up to «, and so TZ C« by Lemma 4.17. Now from (i) and (ii) again, we have (G(A), p) ~ 
{G{B), p). Taking G — X and noting the arbitrariness of p, we have A^ B. D 

Finally, the uniqueness of solutions of equations can be proved for process expressions in qCCS. 

Definition 4.26 Given a process variable X{q) and a process expression E , we call 

• X{(i) is sequential in E if every subexpression of E which contains Xijq), excluding X{ci) itself, 
is of the form a.F , X^ie/ ^i' '^^ '^^ ^ tlien F; 

• X{q) is guarded in E if each occurrence of X{q) is within some subexpression a.F of E where 
a is a (classical or quantum) input or output. 

We also say that E is sequential (resp. guarded) if each process variable is sequential (resp. 
guarded) in E. 
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Lemma 4.27 Let G he guarded and sequential, and contain at most process variables X. If {G{P), p) 
ffliG/Pi • {Pi, Pi)- Then there exist sequential process expressions {Hi : i G /}, containing at 
most process variables X, such that P/ = Hi{Pa) for each i, and for any Q, {G{Q),p) — > 
Wifzipi • {Hi{Qa),Pi). Here 

P{r/q} for some q G qv{P), if a ~ c7r 
Pa ^ ^ P{v/x} for some x G fv{P), if a ~ civ or a ~ t is caused by a measurement 
P, otherwise 

and Qa is defined similarly. Moreover, if a ~ t, then Hi is guarded. 

Proof Similar to Lemma 7.12 of [14]. D 

Theorem 4.28 Let {Ei : i Cz 1} be a family of process expressions containing at most process 
variables {Xi{qi) : « G /}, and each Xj{qj) is sequential and guarded in each Ei. Let {Pi : i Cz 1} 
and {Qi : i G /} be two families of quantum processes such that qv{Pi) U qv{Qi) C qi for each i, and 

P, 0, E,{P,/X,{qj):jeI} 
Q, ~ E,{Q,/X,{q,):jel}, 

then Pi ~ Qi for all i ^ I . 

Proof. For simplicity, we only prove the case where |/| = 1 and all the processes contain no free 
classical or quantum variables. That is, we prove P ~ Q assuming that qv{P) = qv{Q) ~ 0, 
fv{P) — fv{Q) = 0, P ~ E{P), and Q ~ E{Q), where E contains at most process variable X. 
Let 

n - {{{M,p),{N,a)):(M,p)^{H{P),rj) ^nd{N,a)^{H{Q),fi), 

for some rj G L){7i), H is sequential and contains at most X}. 

We show 7^ is a bisimulation. The proof is somewhat similar to Proposition 7.13 in [14]. We first 
claim that for any {M, p)TZ{N,a), 

If (M, p) => p., then {N, a) => u such that pUiy (9) 

Suppose {M,p) =^ p. Then {H{P),ri) =^ pi, p Ri pi, from (M,p) « {H{P),r]). By Theorem 4.21, 
we have H{E{P)) ~ H{P), so {H{E{P)),Tf) =4> p2 such that pi k p2- Note that X is both 
sequential and guarded in H{E{P)). By repeatedly using Lemma 4.27, we have p2 = ffljgjfPi • 
(HUP), p,), and 

{H{E{Q)),ff) =^V2^ ^^^KP^ • {H[{Q),p,) 

where H[ is sequential for any i E K. Since H{E{Q)) ~ H{Q) and {N,a) ~ {H{Q),rj), we have 
{H{Q),rj) =^ v\, V2 ~ vi, and {N,a) =^ v, v\ w v. Furthermore, it is obvious that /Z27?,!/2 from 
Lemma 4.6, and then plZv by Lemma 4.5 since k, oTZo «C TZ. 
Now let (M, p) — > p where a ^ t. There are two cases: 

(1) a = clq is a quantum input. Then p ~ {M' , p) for some M' . So {H{P),rj) ^=^^-^ pi such 
that £{p) ~ £{pi) for any super-operator £ acting on % , -._, i . By Theorem 4.12 we further 

have {H{E{P)),ri) =>-^ p2 such that T{pi) ~ J^{P2) for any super-operator T acting on 
H—f — N_r . . Note that X is both sequential and guarded in H{E{P)). By repeatedly using 
Lemma 4.27, we have p2 — Sj^jqj • {H'JP), p'A, and 

{H{E{Q)),r^) =^^ V2 - ^jejqj • {Hr{Q),p'j) 
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where H', is sequential for any j G J . Using Theorem 4.12 again we have {H{Q), r/) =>— ^- vi 

such that J-'{v2) ~ ^'{^i) for any super-operator F' acting on ^~l■~;J^p^7^\^ ^nd {N, a) ^=^^-^ 
v such that £'{vi) ~ ^'{i^) for any super-operator £' acting on "H — 7 — -^_, i . Finahy, since 
qv{fi) = qv{jii) = qv{vi), wc have 

Gip) ~ G{jJ-i) ~ G{P2) and ^/(iya) « G{i^i) ~ G{j^) 

for any super-operator Q acting on H — , s_f -, . Note that by Lemma 4.6, Q {ii2)Ti-G {^2) ■ Then 
Q{p.2)'Ti'G{v2) from Lemma 4.5 since « o7?.o «C 7?.. 

(2) a is a quantum output or classical input/output. Then {H{P),r]) =^ ^i, fi « /ii, and 
{H{E{P)),ri) => /X2, /ii ~ /i2- We further break the sequence of actions of {H{E{P)),ri) into 

{H{E{P)),r^)=^^fis=^fi2. 

Note that X is both sequential and guarded in H{E{P)). By repeatedly using Lemma 4.27, 
we have fi^ = fflie^Pi • {Hl{P), pi), and 

{H{E{Q)),r,) ^^ 1/3 = m,eKP^ • (i?I(Q),P») 

where H'^ is sequential. For any i (^ K, it is obvious that {H^{P), pi)TZ{H^{Q), pi). So by 
Eq.(9) we have v^ =^ V2 such that iJ,2TZi'2- We further derive (H{Q),r]) =^ vi, V2 ~ vi and 
{N,a) =^ v, vi « V. Finally, we have ^TZv from p2T^i^2- 

We have proved that 7^ is a bisimulation. In particular, for any sequential H, H{P) k, H{Q). 
Since E is guarded and sequential, every occurrence of X is within some subexpression a.F of 
E where F is also sequential. Then we have F{P) « F{Q), and then aF{P) ~ aF{Q). Thus 
E{P) ~ E{Q) by Theorem 4.21. Now the resuh P ~ Q follows from P ~ E{P) and Q ~ £;(Q). D 

To illustrate the power of the theorems proved in this section, let us reconsider Example 4.11. We 
will provide another proof for U{U) oU(y) ~ U{VU) using the Expansion law and the uniqueness 
of solutions of equations. For simplicity, we only consider the special case where U and V are both 
1-qubit unitary operators. Recall the definition oiU{U) oU{V) in Example 3.6: 

U{U)oU{V) t/ (L,||W(C/)[e/c,f/d]||W(y)[f/c,g/d]||i?,)\i 

where L = {c, e,f,g}. Then from Theorem 4.25(1), and repeatedly using Theorems 4.23 and 4.21, 
we have 

U{U)oU{V) ~ c7q.T.U[q].T.V[q].T.d\q.T.U{U)oU{V) 

where the first t action is caused by interaction between Ls and U{U)[e/c,f/d], the second one 
between W(f7)[e/c,f/d] and W(F)[f/c,g/d], the third one between Z^(V^)[f/c,g/d] and Rs, while the 
last one between Rg and Lg. 

On the other hand, by Theorem 4.25(1) we have 

U{VU) ~ c7q.VU[q].d\q.U{VU). 

Now let X be a quantum process variable with qt){X) = 0, and 

E = c7q.T.U[q].T.V[q].T.d\q.T.X , F = c7q.VU[q].dlq.X 

be two quantum process expressions. Then E and F are both sequential and guarded, and E '^ F . 
So we have U{U) o U{V) ~ U{VU) from Theorem 4.28. 
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5 Conclusions and further work 

In this paper, we propose a formal model qCCS, which is a quantum extension of classical value- 
passing CCS, to model and rigorously analyze the behaviors of quantum distributed computing and 
quantum communication protocols. We define a notion of equivalence, based on bisimulation, for 
quantum processes in qCCS, and prove that it is preserved by all process constructors, including 
parallel composition, restriction, and recursive definitions. This is the first congruent equivalence 
for process algebras proposed so far aiming at modeling quantum communicating systems. Various 
examples are fully examined to show the expressiveness as well as the proof techniques of qCCS. 

We conclude this paper by pointing out some topics for further study. In the present paper, only 
exact bisimulation is presented where two quantum processes are either bisimilar or non-bisimilar. 
Obviously, such a bisimulation cannot capture the idea that a quantum process approximately 
implements its specification. Note that this approximation, or imprecision, is especially essential for 
quantum process algebra since quantum operations constitute a continuum and exact bisimulation is 
not always practically suitable for their physical implementation. To provide techniques and tools for 
approximate reasoning, a quantified version of bisimulation, which defines for each pair of quantum 
processes a bisimulation-based distance characterizing the extent to which they are bisimilar, has 
already been proposed for purely quantum processes in [19]. We plan to extend it to qCCS defined 
in this paper. 

Another interesting direction worthy of being researched is to expand the application scope of 
qCCS to model and analyze the security properties of quantum cryptographic systems. By intro- 
ducing cryptographic primitives, such as constructors for encryption and decryption, into pi-calculus, 
the Spi calculus [1] has been very successful in cryptographic protocol analysis. We believe that a 
similar extension of our qCCS will provide tools for analyzing quantum cryptographic protocols such 
as BB84 quantum key distribution protocol. 
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